Give it to Fodide

In Fodide, Settings → Connectors → Development → Cloudflare. Paste, tap Check, then Keep on this phone. Fodide lists the domain it can see with ✓.

Each app then gets a card: Use your Cloudflare for <app>? Type Domain (zone) on Cloudflare and tap Use it. You do not need Zero Trust or Access. Fodide gates the server's SSH address with a firewall rule in your zone.